Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/42823c6f-305b-39c2-850b-5bdea5dddd87.roa
File:                     42823c6f-305b-39c2-850b-5bdea5dddd87.roa (raw, json)
Hash identifier:          9Ykbzy42DxGcoAPfu6SAkJV2kx7FKpN3NHO534AoktI=
Subject key identifier:   A8:B0:90:BC:83:37:EA:22:62:40:24:54:FA:51:70:77:61:E4:36:8F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD810C7E29F6E8FB94400
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/42823c6f-305b-39c2-850b-5bdea5dddd87.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        2001:4c8:1095::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d8:10:c7:e2:9f:6e:8f:b9:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=a93829ff-2df8-4903-b0cb-afddf4c25477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:87:fd:4e:f8:74:64:5c:32:df:f5:ed:5a:
                    7b:d0:2d:5a:1a:7f:e9:c8:35:d4:cb:87:cf:e3:00:
                    ed:83:45:ba:e6:fb:4c:5a:bb:b1:9f:18:a4:cd:81:
                    90:b3:61:9f:1c:f7:0c:e5:34:c7:51:4d:bc:92:89:
                    6b:49:a5:f8:e3:4d:42:c9:95:97:ca:92:46:f2:03:
                    27:04:7c:d6:49:7b:00:d0:ba:4b:1c:71:ca:3b:e3:
                    3a:45:dc:ca:85:09:2e:76:4d:ba:dd:8c:11:b6:f4:
                    0c:b9:db:33:e9:7e:b2:dd:af:1e:a1:fc:bc:e2:cc:
                    2a:57:84:9a:93:9c:36:3f:9b:e1:b9:06:f6:2e:a4:
                    64:e1:e6:5e:96:95:d9:c3:01:3a:a2:17:75:de:0a:
                    04:e1:40:c9:8e:98:5a:50:0d:fa:26:46:6a:7b:1b:
                    b1:70:db:8e:0f:ef:b2:7d:eb:00:7b:9e:0d:4e:90:
                    a5:42:a1:6b:bc:82:d4:4a:9d:07:fd:94:4a:52:08:
                    ce:d3:f1:67:e6:e1:bf:e8:e6:9b:26:2f:96:ee:d3:
                    f5:29:6b:f5:ad:dc:da:f9:77:e2:3b:e7:e5:bf:d0:
                    90:72:74:93:f5:10:53:2c:6e:eb:8f:4c:09:97:a0:
                    1b:92:8a:0c:3f:cf:18:9b:ac:85:be:e5:0d:5a:8a:
                    50:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:B0:90:BC:83:37:EA:22:62:40:24:54:FA:51:70:77:61:E4:36:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/42823c6f-305b-39c2-850b-5bdea5dddd87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1095::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:5c:78:4f:ad:91:4b:92:49:2d:47:ec:44:9e:5e:27:eb:75:
         1b:f6:7a:5b:b5:67:a6:9c:08:9c:cf:e9:90:d2:dc:cc:da:db:
         20:b5:db:0f:83:04:d6:0f:91:0c:7d:49:3c:fa:f4:2a:80:79:
         18:7e:2d:b8:2d:c9:e8:7b:64:10:58:16:d4:6c:3c:bd:76:c7:
         0e:f5:09:01:c4:c4:c5:61:da:5b:a2:25:85:35:37:8a:06:7d:
         c4:e5:c9:67:5b:e3:b3:15:d8:ff:9c:81:16:a7:03:38:ff:01:
         a3:25:41:55:ad:26:35:b1:00:6f:b2:6d:9c:22:4a:5a:9d:46:
         35:97:a5:f5:7e:55:5d:88:95:6e:cb:0b:40:d8:a2:a7:a0:e8:
         5b:ea:f3:be:9f:87:05:9f:f9:8c:de:02:a7:e1:59:55:d6:49:
         05:23:c0:4f:10:05:9c:e9:53:b7:3b:d9:fe:f2:8d:c6:9c:44:
         87:6d:1e:1b:2e:74:38:f1:a2:e1:c2:2e:a0:d1:c3:e9:be:3a:
         8a:11:11:6d:e4:bf:36:cc:cd:70:39:a2:04:a4:b1:ec:e6:a9:
         bf:c6:dd:51:ff:ec:b3:8e:38:92:50:74:9d:e9:a0:9c:ca:9c:
         1e:8f:8c:64:f5:f3:60:f7:58:a6:58:a8:89:9a:05:ff:6b:22:
         ae:b8:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:33:58 2025 by rpki-client